
$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft
File: 848EB2427D617D2F83AC459253A873E550C79E2D.mft (raw, json)
Hash identifier: fuhbqMw3pbUO+mbFU7XSBItYB+sLPm7ARZTsBf8Z3RM=
Subject key identifier: 99:B7:77:4A:5C:62:93:05:1E:83:33:23:6A:8D:FC:04:C8:B6:CA:D8
Authority key identifier: 84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D
Certificate issuer: /CN=848EB2427D617D2F83AC459253A873E550C79E2D
Certificate serial: 68B9B77FD93025E1BEF0818CDAA60F80A162590F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft
Manifest number: CF
Signing time: Mon 03 Nov 2025 07:43:41 +0000
Manifest this update: Mon 03 Nov 2025 07:38:41 +0000
Manifest next update: Tue 04 Nov 2025 08:24:41 +0000
Files and hashes: 1: 323830343a346331303a3a2f33322d3438203d3e20323637333437.roa (hash: 6ojMn0OC0/Tkj1yL1J7bJQxkUBcfNAQWyiS2pbokNQ8=)
2: 848EB2427D617D2F83AC459253A873E550C79E2D.crl (hash: Rs2MLVJ2gM+mfbbssWo34FgYWfszIrGF5+vdQcNuWcU=)
3: 34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa (hash: kVEUM0+/jn+r6zanlFczfAds1h+k32VTQiq8B3t1sbo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl
rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 08:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b9:b7:7f:d9:30:25:e1:be:f0:81:8c:da:a6:0f:80:a1:62:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848EB2427D617D2F83AC459253A873E550C79E2D
Validity
Not Before: Nov 3 07:38:41 2025 GMT
Not After : Nov 4 08:24:41 2025 GMT
Subject: CN=99B7774A5C6293051E8333236A8DFC04C8B6CAD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1b:7b:a5:c5:6a:3d:6a:1b:31:b3:4a:85:45:
0c:0a:52:72:a2:91:56:db:91:09:40:e6:3b:93:35:
18:30:61:7e:89:97:5a:17:81:f1:c9:21:89:58:74:
53:a6:be:e8:8e:6b:ce:27:f8:e8:87:7e:51:d1:95:
fc:d4:dc:c1:ad:55:0a:d3:6b:42:8d:42:5e:b4:14:
ba:ae:a0:f3:bf:03:be:10:be:38:6a:92:e1:eb:a2:
7b:31:19:58:5a:0d:4c:08:7a:ff:81:e1:70:0a:74:
6d:9e:c2:2c:fe:c5:27:ae:8a:e2:e6:80:a0:cf:38:
1b:e7:6d:ec:17:8a:91:b5:3b:6a:52:b9:b6:29:6a:
84:7e:8b:c9:96:5c:f3:df:f0:18:22:b4:f8:25:b6:
77:06:56:7e:21:8b:ed:6c:61:39:2c:a0:0a:f4:17:
7a:0a:e0:19:5f:a1:35:48:14:68:bc:90:e2:83:5d:
94:f2:81:99:45:ef:3b:8a:99:21:4a:6a:1a:1c:68:
29:85:f5:ed:3a:10:4b:3a:29:fa:2a:9d:87:4d:2e:
c1:88:87:cd:c3:82:9d:b6:7e:08:7b:3e:b6:35:03:
f8:1c:d3:99:38:f6:9a:cb:70:6c:5b:2b:63:8c:1b:
07:70:d1:90:a6:1a:de:f4:28:3e:76:aa:8e:8b:10:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:77:4A:5C:62:93:05:1E:83:33:23:6A:8D:FC:04:C8:B6:CA:D8
X509v3 Authority Key Identifier:
keyid:84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:49:f2:b4:92:a1:a2:ba:be:28:01:4b:52:96:82:57:d4:8b:
91:a6:0b:9a:ef:c3:55:9e:be:c6:97:c1:fd:54:8e:83:09:53:
66:ae:9d:90:ba:db:07:55:f5:fe:bf:17:30:03:da:aa:62:a6:
12:04:e6:c6:3d:da:bf:d2:5b:f1:87:9b:bd:14:c0:4d:29:02:
8d:29:2c:db:5b:c6:ff:63:2a:ea:b7:15:7d:54:42:8c:ef:4a:
d4:9c:2a:e4:05:a9:07:71:a8:0c:1a:93:07:b5:0f:d0:9a:c0:
45:93:3f:db:ce:a3:d5:ed:5a:46:7a:11:b5:09:c7:cb:40:34:
55:d5:f6:7f:50:2a:88:f4:ac:a1:63:43:29:fe:47:7a:1b:25:
5a:66:ce:85:a7:53:0c:b4:9b:46:59:93:2c:8e:c6:49:08:b9:
12:39:01:0e:81:f5:a9:3e:29:f9:93:25:b5:ba:0d:d2:0b:d9:
5d:74:b1:4f:31:b6:82:67:12:ee:72:f6:6a:09:76:d7:9d:98:
6e:c9:25:37:c9:4c:41:e1:30:e4:fb:da:51:b2:85:98:cd:52:
62:83:4d:c2:55:ef:9f:49:65:12:9d:16:06:86:45:e7:11:8d:
a7:bc:83:2b:c5:08:b2:7e:b4:97:54:0d:2f:9b:e4:08:21:ca:
25:01:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:35:58 2025 by rpki-client